Add Barbican HSM custom image support

[mauricioharley]

This PR introduces support for deploying Barbican with Hardware Security Module (HSM) capabilities using custom container images.

Changes

Makefile Updates

• New Variables: Added BARBICAN_API_IMAGE, BARBICAN_WORKER_IMAGE, and BARBICAN_HSM_ENABLED to control HSM deployments
• Conditional Image Logic: When BARBICAN_HSM_ENABLED=true, custom images are used if provided via the new variables
• Deploy Preparation: Updated barbican_deploy_prep target to properly handle custom image deployment with correct image paths
• Environment Export: Added HSM-related variables to openstack_init target exports

Standalone Script Updates

• Backend Selection: Modified devsetup/standalone/openstack.sh to conditionally select between:
  • barbican-backend-pkcs11.yaml when HSM is enabled
  • barbican-backend-simple-crypto.yaml for standard deployments

Usage

To deploy Barbican with HSM support:

make openstack BARBICAN_HSM_ENABLED=true \
    BARBICAN_API_IMAGE=<your-hsm-api-image> \
    BARBICAN_WORKER_IMAGE=<your-hsm-worker-image>

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: mauricioharley
Once this PR has been reviewed and has the lgtm label, please assign fmount for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[softwarefactory-project-zuul]

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/1b53de6c9a2849c79dc4aa80b085abf9

❌ openstack-k8s-operators-content-provider TIMED_OUT in 30m 50s
⚠️ install-yamls-crc-podified-edpm-baremetal SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
⚠️ podified-multinode-edpm-deployment-crc SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
⚠️ adoption-standalone-to-crc-ceph-provider SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
⚠️ adoption-standalone-to-crc-no-ceph-provider SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider